golang-github-prometheus-promu vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the golang-github-prometheus-promu package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
L Improper Verification of Cryptographic Signature	*
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
M Improper Input Validation	*
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
H Cross-site Scripting (XSS)	<0:0.15.0-15.1.gitd5383c5.el8
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
H Allocation of Resources Without Limits or Throttling	<0:0.15.0-15.1.gitd5383c5.el8
H CVE-2023-39321	<0:0.15.0-15.1.gitd5383c5.el8
H Cross-site Scripting (XSS)	<0:0.15.0-15.1.gitd5383c5.el8
H Cross-site Scripting (XSS)	<0:0.15.0-15.1.gitd5383c5.el8
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
H Use of a Broken or Risky Cryptographic Algorithm	<0:0.15.0-15.1.gitd5383c5.el8
H Use After Free	<0:0.15.0-15.1.gitd5383c5.el8
H CVE-2023-2728	<0:0.15.0-15.1.gitd5383c5.el8
H CVE-2023-2727	<0:0.15.0-15.1.gitd5383c5.el8
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
M Improper Input Validation	*
M Improper Input Validation	*
H Resource Exhaustion	<0:0.15.0-15.1.gitd5383c5.el8
M CVE-2023-39321	<0:0.15.0-15.1.gitd5383c5.el8
M Allocation of Resources Without Limits or Throttling	<0:0.15.0-15.1.gitd5383c5.el8
M Improperly Controlled Sequential Memory Allocation	*
M Information Exposure	<0:0.5.0-5.git642a960.el8
M Information Exposure	<0:0.5.0-5.git642a960.el8
M Resource Exhaustion	<0:0.5.0-5.git642a960.el8
M Resource Exhaustion	<0:0.5.0-5.git642a960.el8
M Race Condition	<0:0.5.0-5.git642a960.el8
M Race Condition	<0:0.5.0-5.git642a960.el8
M Improper Input Validation	*
M Improper Input Validation	<0:0.5.0-5.git642a960.el8
M Resource Exhaustion	<0:0.5.0-4.git642a960.el8
M Improper Input Validation	<0:0.5.0-4.git642a960.el8
M Improper Input Validation	<0:0.5.0-4.git642a960.el8
M Incorrect Calculation	<0:0.5.0-3.git642a960.el8
M Improper Certificate Validation	<0:0.5.0-3.git642a960.el8
M Race Condition	<0:0.5.0-3.git642a960.el8
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:0.5.0-3.git642a960.el8
M Improper Input Validation	<0:0.5.0-4.git642a960.el8
M Improper Input Validation	<0:0.5.0-4.git642a960.el8

Vulnerability

Vulnerable Version

Improper Verification of Cryptographic Signature